[CentOS] faI2ban detecting and banning but nothing happens

Mon Apr 29 16:21:54 UTC 2019
Gordon Messmer <gordon.messmer at gmail.com>

On 4/29/19 1:44 AM, Gary Stainburn wrote:
> and the lines are still appearing.  Here is my jail.local. (I did also try directly editing jail.conf to update the port commands).
>
>
> [exim]
> port    = 0:65535


If that's all that's in jail.local, then the jail shouldn't be enabled.  
They're off by default.  I'd suggest that you remove fail2ban 
completely.  Remove the packages, and then delete /etc/fail2ban, and 
start again.

When you're done, look at the output of "iptables -n -L INPUT_direct":

# iptables -n -L INPUT_direct
Chain INPUT_direct (1 references)
target     prot opt source               destination
REJECT     tcp  --  0.0.0.0/0            0.0.0.0/0 match-set 
fail2ban-sshd src reject-with icmp-port-unreachable